POEV

Privacy

POEV is built to need as little of your data as possible. This page says in plain words what we store, why, on what legal basis, for how long, and how to have it deleted.

No cookies, no trackers

This site sets no cookies and runs no analytics or advertising trackers. Fonts are served from our own domain: the page makes no requests to third parties. What you type stays in the form until you press the button. When the request form loads, the page asks our own server which country your connection comes from, so the region field starts on the right answer. Nothing about it is stored. If you switch between the light and dark theme, your browser remembers that choice; it never leaves your device.

Who is responsible and which law applies

The data controller is the POEV project; contact: info@poev.eu. We process your data under the General Data Protection Regulation (GDPR, EU 2016/679) and Spain's Organic Law 3/2018 on personal data protection and digital rights (LOPDGDD).

What we store

When you request a verdict: your email, the listing link, your region, your language, your optional comment and, when it can be known, the page of our site where your visit began. If you came from one of our ads on Google, also that campaign's tags — the next section explains which. From car listings we store only facts about the vehicle and the ad — price, mileage, year, battery data — never sellers' names or phone numbers. For cars sold by private sellers we don't store the VIN at all.

Our ads on Google

When someone arrives from one of our ads on Google, the page address carries tags that our own campaign puts there: which campaign and ad group it was, the keyword the ad was shown for, whether your search matched that keyword exactly or loosely, and the device type (phone, computer or tablet). The page reads them from the address and adds them to the links on that same page that lead to our request form, so they are still there if you go to the form from it; if you visit other pages first, they are lost. There are no cookies, and these tags are not saved in your browser: they only travel in the address, which stays in your history like any other. They are stored only if you send a request: then they go with it and follow its timelines — after 90 days your contact is deleted and the tags remain only with a request that has no email. They tell us which ads bring requests and which don't. We send nothing to Google: neither your details nor whether you asked for a verdict. The click identifier Google sometimes adds to the address is neither read nor stored by us.

What it's used for

Your email is used to send you the verdict you asked for and to ask whether it helped. Listing facts feed the verdict itself and — in aggregate — make our estimates better. The entry page and the campaign tags tell us which pages and which ads bring requests. Nothing is sold or shared with third parties.

Legal basis

Sending you the verdict you asked for: performance of a service you requested (art. 6.1.b GDPR). Asking whether it helped and improving our estimates in aggregate: legitimate interest in improving the service (art. 6.1.f) — you can object at any time by email. Storing the entry page and campaign tags with your request: legitimate interest in knowing which advertising works (art. 6.1.f) — here too you can object by email.

How long we keep it

Your contact is deleted 90 days after your request. Listing records of private sellers are anonymised 12 months after the listing disappears: the link is replaced by a code, quotes are removed, and only an anonymous data point (model, year, km, price, outcome) remains.

Your rights

You have the right to access your data, correct it, delete it, restrict or object to its processing, and to portability. One email to info@poev.eu is enough; deletion requests are honoured immediately. Sellers can request the same for records about their listing.

Where to complain

If you think we have mishandled your data, write to us first and we will sort it out. You can also lodge a complaint with the Spanish data protection authority (AEPD, aepd.es).

Where the data lives

The database runs on Supabase in the EU (Paris region). The site runs on Vercel; your request goes through our own function on Vercel, which runs in the EU (Paris), and from there into the database. Verdict emails are sent through Brevo (France). All three act as processors under their standard EU data-processing agreements. Brevo records whether a verdict email was opened and which of its links were clicked; our account has Brevo's anonymous tracking turned on. The email also shows our logo, which your mail app loads from poev.eu like any picture on a web page; we don't look at those requests to find out who opened an email.